As residents of Saudi Arabia, SAMA provides us with YARA rules for threat detection.
How can we effectively create and implement our own query within Sophos Central to scan for these YARA rules?
What are the best practices and challenges associated with this process?
Hi Mansoor,
Thanks for reaching out to the Sophos Community Forum.
I suggest proceeding with some of the steps highlighted in this blog post highlighting YARA Scanning rules with Sophos XDR.
Let me know if this helps.
Hi Mansoor,
Thanks for reaching out to the Sophos Community Forum.
I suggest proceeding with some of the steps highlighted in this blog post highlighting YARA Scanning rules with Sophos XDR.
Let me know if this helps.
